This information notice is provided, pursuant to EU Regulation 2016/679 of the European Parliament and Council of April 27, 2016, exclusively for the institutional websites of the Scuola Normale Superiore.
Data Controller
The Scuola Normale Superiore, represented by its acting Director, located in Pisa, P.za dei Cavalieri 7, phone +39.050.509111, certified email: protocollo@pec.sns.it, is the data controller for personal data voluntarily provided or automatically collected from the institutional websites.
Data Protection Officer
Contact details of the Data Protection Officer
Marco Marchetti: dpo@sns.it
phone: 050500082
Purpose and Legal Basis of Data Processing
The personal data described in this notice are processed by the Controller in the performance of its public interest tasks or otherwise connected to the exercise of its public powers, including the task of promoting awareness of the initiatives of the Department for Digital Transformation (Art. 6, Para. 1, Letter e of the GDPR).
Types of Data Processed, Processing Purposes, and Retention Period
In compliance with the principles of lawfulness, fairness, transparency, adequacy, relevance, and necessity under Art. 5, Para. 1, of EU Reg. 679/2016, the Data Controller will process personal data automatically collected while browsing the Scuola’s websites or voluntarily provided for the following purposes:
- Browsing data, such as IP addresses, domain names of users’ computers connecting to the site, URI (Uniform Resource Identifier) addresses of requested resources, request time, method used to submit the request to the server, file size received in response, server response status code (success, error), and other parameters related to the user’s operating system and IT environment, are collected solely to obtain anonymous statistical information on website use and ensure its proper functioning. Although not collected for the purpose of identifying users, these data could allow user identification through processing and association with data held by third parties. Finally, these data may be used to ascertain liability in the event of potential cybercrimes against the websites.
- Data voluntarily provided by users, including information, personal, and identifying data collected to enable user access to specific requested services, such as non-institutional email addresses, personal phone numbers, and any special or judicial data voluntarily provided by users during online service usage or by sending requests to published email addresses, are processed solely for institutional purposes and in the interest of the requesting user.
The processing activities and retention periods for the data vary depending on each online service and are detailed in specific notices available on subscription pages.
Categories of Data Recipients and Possible Data Transfers
The data processed for the above purposes will be communicated or made accessible to employees and collaborators assigned to the relevant offices of the Data Controller, who, as data protection contacts and/or system administrators and/or processing delegates, will be adequately trained by the Data Controller.
The Scuola Normale Superiore may also communicate personal data to other public administrations if they need to process the data for procedures within their institutional competence, as well as to any public entities to whom communication is mandatory under EU regulations, laws, or regulations.
The management and storage of personal data collected by the Scuola Normale Superiore occur on servers located within its premises.
Data Retention Period
Browsing data automatically collected are retained only for the time necessary (24 hours) to derive anonymous statistical information on website usage and ensure its proper functioning, after which they are immediately deleted.
For the retention periods of other data voluntarily provided by users, please refer to the specific notices prepared by the relevant Offices.
Rights of the Data Subject
The data subject has the right to request from the Data Controller, pursuant to Articles 15, 16, 17, 18, 19, and 21 of EU Reg. 679/2016: access to their personal data and all related information; correction of inaccurate personal data and completion of incomplete data; deletion of personal data, except for those contained in records that must be retained by the Scuola Normale Superiore, and unless there is an overriding legitimate reason to process them; restriction of processing in cases specified under Art. 18 of the Regulation.
The data subject also has the right to object to the processing of their personal data, subject to the necessity and obligation of processing for the establishment of a relationship; to withdraw consent, if provided, for non-mandatory data processing, without affecting the lawfulness of processing based on consent before its withdrawal.
The data subject may exercise all the above rights by sending an email to the Data Controller at privacy@sns.it
The data subject also has the right to lodge a complaint with the Data Protection Authority pursuant to Art. 77 of EU Reg. 679/2016.
For any clarification, the Data Protection Officer can be contacted at: dpo@sns.it
Mandatory or Optional Data Provision
Except as specified for browsing data, users are free to provide their personal data or not. Providing such data may be necessary to use certain online services.
Cookies
Cookies are text files stored on users’ computers to enable secure and efficient browsing of the site and monitor its usage.
No personal data is intentionally acquired by the site.
This site uses technical cookies necessary for its operation and to enhance the user experience.
This site uses profiling cookies managed by the centralized platform Web Analytics Italia (WAI) by AgID. WAI stores statistical data of Italian public administration websites in an anonymous form (through IP address masking), aggregated statistical information on user navigation (e.g., number of pages visited and accesses, time spent on the site).
These cookies are assimilated to technical cookies and do not require your consent. Furthermore, these analytical cookies, once stored on your browser, may remain for up to 13 months, subject to the possibility of disabling them at any time via your browser settings as described in the following section.
To access video content hosted directly on the site, before viewing, you will be asked to approve third-party profiling cookies from YouTube (https://policies.google.com/privacy?hl=en) which also activate other technical identifiers used by YouTube to enable video streaming from the site. These cookies will only be stored in your browser after obtaining your consent, which can be limited to a single video or extended to all videos on the site by selecting “Remember for all videos.” You can always change your choice using the “Revoke” button in the “Cookie Management” section at the bottom of this notice. The cookie management functionality is also accessible from the site footer.
How to disable cookies (opt-out) on your device
Most browsers automatically accept cookies, but they can be declined. If you do not wish to receive or store cookies, you can modify your browser’s security settings according to the instructions provided by the respective providers at the links below. Disabling all cookies may prevent the site from functioning properly.